Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37299020A26E11F0A043633DC4F9AE02.roa
File: 37299020A26E11F0A043633DC4F9AE02.roa (raw, json)
Hash identifier: ImuHOI9pLUtYZUVjI5vysHbDEEsd6YI068auVweKTA8=
Subject key identifier: 69:11:B1:DA:0A:30:9F:FC:16:27:13:93:0F:8A:3E:F2:64:93:A8:0C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E22C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37299020A26E11F0A043633DC4F9AE02.roa
Signing time: Sun 31 May 2026 16:35:03 +0000
ROA not before: Sun 31 May 2026 16:35:03 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 132996
IP address blocks: 43.243.212.0/22 maxlen: 24
43.252.32.0/22 maxlen: 24
103.69.112.0/22 maxlen: 24
103.129.206.0/24 maxlen: 24
103.166.119.0/24 maxlen: 24
103.172.226.0/23 maxlen: 24
103.252.4.0/22 maxlen: 24
103.253.200.0/22 maxlen: 24
2402:540::/48 maxlen: 48
2402:540:1::/48 maxlen: 48
2402:540:2::/48 maxlen: 48
2402:540:3::/48 maxlen: 48
2402:540:4::/48 maxlen: 48
2402:540:5::/48 maxlen: 48
2402:540:6::/48 maxlen: 48
2402:540:7::/48 maxlen: 48
2402:540:8::/48 maxlen: 48
2402:540:9::/48 maxlen: 48
2402:540:a::/48 maxlen: 48
2402:540:b::/48 maxlen: 48
2402:540:c::/48 maxlen: 48
2402:540:d::/48 maxlen: 48
2402:540:e::/48 maxlen: 48
2402:540:f::/48 maxlen: 48
2402:540:10::/48 maxlen: 48
2407:da40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57900 (0xe22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:35:03 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6337-ef91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:2d:68:8e:48:c1:15:3d:48:8b:5d:88:45:
f7:5d:43:94:fc:59:21:34:5a:84:48:cf:3d:2a:55:
76:a4:b9:21:bb:1f:7a:d4:ba:ad:45:52:b6:53:2f:
d0:d9:ac:df:8e:04:8d:6a:20:53:56:ad:9b:57:7f:
7d:41:56:16:92:17:f6:b7:4c:10:b2:c3:4a:2f:b8:
fd:9a:a5:9c:bf:74:40:2c:0a:b7:8e:e1:e5:0d:9c:
3e:cc:64:19:40:29:d3:28:4a:01:34:fe:bd:22:a8:
c2:b2:ed:5f:f4:1d:df:27:63:82:c1:f7:a9:0c:e8:
29:80:1d:65:41:e7:68:f3:ae:74:07:38:5f:7c:c5:
b9:e4:6f:f8:2e:4f:a4:e3:af:ef:80:2b:97:5d:51:
58:3f:41:36:14:0c:50:a6:5c:e6:c3:e5:07:62:e8:
16:5b:23:30:39:81:0c:3a:65:64:e5:24:57:3e:de:
e8:11:d9:c9:a7:d1:8d:20:a2:3f:c3:a8:24:61:1d:
e2:4f:b1:1a:54:1d:98:f4:5b:4f:2e:c5:7b:1d:12:
a0:db:d6:30:84:a3:a9:42:5c:08:8b:61:23:1e:eb:
94:58:85:7c:1c:c2:a4:84:66:ae:4a:ea:4c:b2:69:
d6:6f:74:fc:88:9d:82:3f:77:e3:9d:82:6d:94:fd:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:11:B1:DA:0A:30:9F:FC:16:27:13:93:0F:8A:3E:F2:64:93:A8:0C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37299020A26E11F0A043633DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.243.212.0/22
43.252.32.0/22
103.69.112.0/22
103.129.206.0/24
103.166.119.0/24
103.172.226.0/23
103.252.4.0/22
103.253.200.0/22
IPv6:
2402:540::-2402:540:10:ffff:ffff:ffff:ffff:ffff
2407:da40::/32
Signature Algorithm: sha256WithRSAEncryption
11:c7:b4:e6:47:a5:c3:01:53:5e:3d:c8:4f:51:65:0e:b3:ad:
e4:10:70:7a:b0:d7:0c:cf:41:cd:fe:26:fe:e2:10:74:c6:65:
4a:8b:ad:ee:c2:db:aa:97:d9:8a:e9:df:c8:f9:b0:9a:b4:83:
1e:a1:6c:7d:3b:04:f1:17:3b:57:e2:4a:bd:7f:ec:98:ae:62:
ca:34:39:77:95:9b:44:3f:c5:cb:cb:e6:89:04:e5:d7:c2:0e:
5f:66:a6:dd:0c:b6:c1:34:46:a4:26:f1:ae:5e:3d:2b:20:6a:
9a:4e:f3:3d:59:15:6d:ce:58:56:e9:64:2f:ba:67:0d:18:b4:
7b:ba:b1:a3:10:48:98:f4:63:a3:d6:60:91:fd:2c:30:07:14:
aa:e0:3b:7d:7b:4b:00:56:e9:d4:60:d4:7b:99:3e:d9:ab:52:
d2:fe:9c:af:db:f8:1e:00:17:ef:ed:9c:bd:e9:3c:dd:10:da:
9a:e8:5f:0d:09:dc:52:24:68:74:43:b1:95:03:aa:72:79:62:
a1:93:01:5a:9d:77:bc:09:73:6d:2f:f2:05:1b:04:10:f4:be:
76:91:da:76:64:60:5e:19:01:d3:70:c4:2a:a8:4e:2f:23:19:
ca:ea:22:6b:cd:d2:88:09:7e:14:66:e4:f2:c6:b1:c2:07:b7:
61:fd:e5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:01 2026 by rpki-client